Trojan horse BackDoor.Dumador.AW

[RogerM]

Somehow I've picked up Trojan horse BackDoor.Dumador.AW. AVG picks it up, and after running it says that the virus has been "healed". I then reboot and the trojan is still there. I've tried running AVG with System Restore turned off, but still get the same result - i.e. AVG says it's healed but it's still there after rebooting.

AVG identifies it in file C:\WINDOWS\prntsvr.dll

Spybot doesn't reveal it.

Any ideas anyone?

 

[oatman]

Got this from a dutch website
http://www.pestpatrol.com/pestinfo/b/backdoor_dumador.asp

there are a few aliases(is that the plural of alias :cheesy: )could try this
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=38007

 

[Indi]

Hi Roger,
Try this FREE(14 day) trojan remover,hope it helps.

http://www.ewido.net/en/?section=download

 

[chump]

Just a thanks to Oatman , since I clocked this forum and took the advice further back some months ago I have been running trouble free <g> ... famous last words ,bit like Custer at the Bighorn "this looks like a nice place to camp"

 

[oatman]

Cheers Chump, no problem, just stay clean

 

[RogerM]

Thanks guys.

Oatman - tried following the instructions given on your link for manual removal but couldn't find the files listed. I think this is a different beast to the one they list.

Indi - ewido certainly cleaned out a load of cookies, but not the little b***** that I have.

Please keep the ideas coming - we'll zap the little b****** eventually.

 

[Racer]

try www.pandasoftware.com and use the free anti virus scanner.. that has found and cleaned things that AVG couldn't on one of my computers

 

[JFK]

Hi Roger,
Try this site
http://www.sophos.com/virusinfo/analyses/w32dumaruak.html
this version of the same virus has similar characteristics.

 

[oatman]

Might be AVG playing up again
Anyway, try these
http://www.windowsecurity.com/trojanscan/
http://www.trojanhunter.com/
http://scan.sygate.com/pretrojanscan.html
http://www.bitdefender.com/scan/licence.php
http://forum.gladiator-antivirus.com/index.php?showtopic=11418 (loads here :cheesy: )
Also run Ad-aware and Spybot as you had a load of crappy cookies.

 

[calzini]

Read about somebody being successful with this in dealing with trojans in general. I had it on free trial but did not take it up. Will do though if I find one !

http://www.simplysup.com/tremover/index.html

Trojan Remover was written to aid in the removal of Trojan Horses and Internet Worms when standard anti-virus software has either failed to detect the problem or is unable to effectively eliminate it.

Trojan Remover has been written for Windows 95/98/NT/Millennium/XP. It has been successfully used by Windows 2000 users, although this platform has not been officially tested.

The majority of Virus and Trojan Scanners are well able to detect malicious Trojan Horses and Internet Worms but are not always very efficient in removing them once they have been triggered.

Trojan Remover was written specifically to carry out such a removal without the user having to manually edit system files, including the Registry. The program also removes the additional system modifications some Trojans carry out which are ignored by other Virus and Trojan Scanners.